search

tejado / android-usb-gadget

Convert your Android phone to any USB device you like! USB Gadget Tool allows you to create and activate USB device roles, like a mouse or a keyboard. 🛠🛡📱
GNU General Public License v3.0
894 stars 70 forks source link

Phone crashes (RESTARTS) After changing to keyboard and plugging in #4

Open yoyo00xx opened 4 years ago

yoyo00xx commented 4 years ago

My kernal is linage kernal: 4.4 My phone is: HTC U11 I am rooted Android 10

yoyo00xx commented 4 years ago

How to replicate ? (Version 0.2 (latest)) 1) Change to keyboard 2) Active 3) Plug in computer 4) Freezes + Restarts

kstuddard commented 4 years ago

I have the same issue. I am running on a Pixel 2; I have experienced this with (rooted) stock 10 and Lineage 17.1 Same steps to reproduce; open app, press the + button and select "keyboard & mouse.sh", plug into PC. Phone then freezes, screen goes black, and it dies. I seem to have to wait a few seconds after unplugging to turn it back on.

I would be very interested in actively helping resolve this issue but I don't really know where to start.

Here is the log; I just open the app, deactivate, and add the kb&m.

`ROOT - Execute command: for dir in /config/usb_gadget//; do echo GADGET_PATH=$dir; cd $dir; if [ "$?" -ne "0" ]; then echo "Error - not able to change dir to $dir... exit"; exit 1; fi; echo UDC=$(cat UDC); find ./configs/ -type l -exec sh -c 'echo FUNCTIONSACTIVE=$(basename $(readlink "$@"))' {} \;; for f in ./functions//; do echo FUNCTIONS=$(basename $f); done; cd ./strings/0x409/; for vars in *; do echo ${vars}=$(cat $vars); done; echo "============="; done;

ROOT (stdout) - GADGET_PATH=/config/usb_gadget/g1/ UDC=a800000.dwc3 FUNCTIONS_ACTIVE=ffs.adb FUNCTIONS=accessory.gs2 FUNCTIONS=audio_source.gs3 FUNCTIONS=cser.dun.0 FUNCTIONS=cser.nmea.1 FUNCTIONS=diag.diag FUNCTIONS=ffs.adb FUNCTIONS=ffs.mtp FUNCTIONS=ffs.ptp FUNCTIONS=gsi.rmnet FUNCTIONS=gsi.rndis FUNCTIONS=mass_storage.0 FUNCTIONS=midi.gs5 FUNCTIONS=qdss.qdss manufacturer=Google product=Pixel 2 serialnumber=HT7AL1A02668

ROOT (stderr) - ROOT - Execute command: echo "" > /config/usb_gadget/g1//UDC

ROOT (stdout) - ROOT (stderr) - ROOT - Execute command: for dir in /config/usb_gadget//; do echo GADGET_PATH=$dir; cd $dir; if [ "$?" -ne "0" ]; then echo "Error - not able to change dir to $dir... exit"; exit 1; fi; echo UDC=$(cat UDC); find ./configs/ -type l -exec sh -c 'echo FUNCTIONSACTIVE=$(basename $(readlink "$@"))' {} \;; for f in ./functions//; do echo FUNCTIONS=$(basename $f); done; cd ./strings/0x409/; for vars in *; do echo ${vars}=$(cat $vars); done; echo "============="; done;

ROOT (stdout) - GADGET_PATH=/config/usb_gadget/g1/ UDC= FUNCTIONS_ACTIVE=ffs.adb FUNCTIONS=accessory.gs2 FUNCTIONS=audio_source.gs3 FUNCTIONS=cser.dun.0 FUNCTIONS=cser.nmea.1 FUNCTIONS=diag.diag FUNCTIONS=ffs.adb FUNCTIONS=ffs.mtp FUNCTIONS=ffs.ptp FUNCTIONS=gsi.rmnet FUNCTIONS=gsi.rndis FUNCTIONS=mass_storage.0 FUNCTIONS=midi.gs5 FUNCTIONS=qdss.qdss manufacturer=Google product=Pixel 2 serialnumber=HT7AL1A02668

ROOT (stderr) - ROOT - Execute command: #!/bin/sh

CONFIGFS_DIR="/config" GADGETS_PATH="${CONFIGFS_DIR}/usb_gadget"

GADGET="keyboard" GADGET_PATH=${GADGETS_PATH}/${GADGET}

CONFIG_PATH="$GADGET_PATH/configs/c.1/" STRINGS_PATH="$GADGET_PATH/strings/0x409/"

mkdir -p $CONFIG_PATH mkdir -p $STRINGS_PATH

mkdir -p $GADGET_PATH/functions/hid.usb0 cd $GADGET_PATH/functions/hid.usb0

HID protocol (according to USB spec: 1 for keyboard)

echo 1 > protocol

device subclass

echo 1 > subclass

number of bytes per record

echo 8 > report_length

writing report descriptor

echo -ne \x05\x01\x09\x06\xa1\x01\x05\x07\x19\xe0\x29\xe7\x15\x00\x25\x01\x75\x01\x95\x08\x81\x02\x95\x01\x75\x08\x81\x03\x95\x05\x75\x01\x05\x08\x19\x01\x29\x05\x91\x02\x95\x01\x75\x03\x91\x03\x95\x06\x75\x08\x15\x00\x25\x65\x05\x07\x19\x00\x29\x65\x81\x00\xc0 > report_desc

mkdir -p $GADGET_PATH/functions/hid.usb1 cd $GADGET_PATH/functions/hid.usb1

HID protocol (according to USB spec: 2 for mouse)

echo 2 > protocol

device subclass

echo 1 > subclass

number of bytes per record

echo 4 > report_length

writing report descriptor

echo -ne \x05\x01\x09\x02\xa1\x01\x09\x01\xa1\x00\x05\x09\x19\x01\x29\x05\x15\x00\x25\x01\x95\x05\x75\x01\x81\x02\x95\x01\x75\x03\x81\x01\x05\x01\x09\x30\x09\x31\x09\x38\x15\x81\x25\x7F\x75\x08\x95\x03\x81\x06\xc0\xc0 > report_desc

cd $GADGET_PATH echo 0xa4ac > idVendor echo 0x0525 > idProduct

cd $STRINGS_PATH echo "tejado" > manufacturer echo "HID" > product echo "42" > serialnumber

cd $CONFIG_PATH echo 120 > MaxPower echo "HID Configuration" > strings/0x409/configuration

ln -s ${GADGET_PATH}/functions/hid.usb0 $CONFIG_PATH/hid.usb0 ln -s ${GADGET_PATH}/functions/hid.usb1 $CONFIG_PATH/hid.usb1

ROOT (stdout) - ROOT (stderr) - mkdir: '/config/usb_gadget/keyboard': Out of memory mkdir: '/config/usb_gadget/keyboard': Out of memory mkdir: '/config/usb_gadget/keyboard': Out of memory : [16]: cd: /config/usb_gadget/keyboard/functions/hid.usb0: No such file or directory : [19]: can't create protocol: Read-only file system : [21]: can't create subclass: Read-only file system : [23]: can't create report_length: Read-only file system : [26]: can't create report_desc: Read-only file system mkdir: '/config/usb_gadget/keyboard': Out of memory : [29]: cd: /config/usb_gadget/keyboard/functions/hid.usb1: No such file or directory : [32]: can't create protocol: Read-only file system : [34]: can't create subclass: Read-only file system : [36]: can't create report_length: Read-only file system : [39]: can't create report_desc: Read-only file system : [42]: cd: /config/usb_gadget/keyboard: No such file or directory : [43]: can't create idVendor: Read-only file system : [44]: can't create idProduct: Read-only file system : [46]: cd: /config/usb_gadget/keyboard/strings/0x409: No such file or directory : [47]: can't create manufacturer: Read-only file system : [48]: can't create product: Is a directory : [49]: can't create serialnumber: Read-only file system : [51]: cd: /config/usb_gadget/keyboard/configs/c.1: No such file or directory : [52]: can't create MaxPower: Read-only file system : [53]: can't create strings/0x409/configuration: No such file or directory ln: cannot create symbolic link from '/config/usb_gadget/keyboard/functions/hid.usb0' to '/config/usb_gadget/keyboard/configs/c.1//hid.usb0': No such file or directory ln: cannot create symbolic link from '/config/usb_gadget/keyboard/functions/hid.usb1' to '/config/usb_gadget/keyboard/configs/c.1//hid.usb1': No such file or directory ROOT - Execute command: for dir in /config/usb_gadget//; do echo GADGET_PATH=$dir; cd $dir; if [ "$?" -ne "0" ]; then echo "Error - not able to change dir to $dir... exit"; exit 1; fi; echo UDC=$(cat UDC); find ./configs/ -type l -exec sh -c 'echo FUNCTIONSACTIVE=$(basename $(readlink "$@"))' {} \;; for f in ./functions//; do echo FUNCTIONS=$(basename $f); done; cd ./strings/0x409/; for vars in *; do echo ${vars}=$(cat $vars); done; echo "============="; done;

ROOT (stdout) - GADGET_PATH=/config/usb_gadget/g1/ UDC=a800000.dwc3 FUNCTIONS_ACTIVE=ffs.adb FUNCTIONS=accessory.gs2 FUNCTIONS=audio_source.gs3 FUNCTIONS=cser.dun.0 FUNCTIONS=cser.nmea.1 FUNCTIONS=diag.diag FUNCTIONS=ffs.adb FUNCTIONS=ffs.mtp FUNCTIONS=ffs.ptp FUNCTIONS=gsi.rmnet FUNCTIONS=gsi.rndis FUNCTIONS=mass_storage.0 FUNCTIONS=midi.gs5 FUNCTIONS=qdss.qdss manufacturer=Google product=Pixel 2 serialnumber=HT7AL1A02668

ROOT (stderr) - `

tejado commented 4 years ago

Thanks a lot! I will have a look into it later today.

tejado commented 4 years ago

Do you have a terminal app (like termux) installed on your phone? If yes, can you execute following command and provide the output? Thanks

mount -t configfs

kstuddard commented 4 years ago

none on /config type configfs (rw,nosuid,nodev,noexec,relatime)

tejado commented 4 years ago

@kstuddard Just to make sure: you never activated the added gadget by clicking the "Activate" button on the keyboard gadget or? At least this is missing in your description. I would assume, that the new keyboard gadget does not appear on the gadget list, as there are errors in your log when the gadget was (unsuccessful) added.

@yoyo00xx Can you provide me your log before you connect your PC to your smartphone? Thank you!

kstuddard commented 4 years ago

The keyboard gadget never appears for me to click "activate." There is only the /config/usb_gadget/g1/ gadget which I can activate or deactivate. I have tried selecting "mouse+keyboard.sh" with g1 already activated and deactivated, with no difference in outcome.

Nothing I can do from the app seems to create the new gadgets appear in the app or make a difference in the outcome of mount -t configfs or ls /config/usb_gadget/

tejado commented 4 years ago

@kstuddard Okay, this is what I expected when I read your logs. But very interessting that your phone freezes then because according to the log, you did not modify anything successful (all commands failed -> gadget was not added), except the deactivation of your standard gadget.

What will happen if you do the same without deactivating the standard gadget? Will the phone freeze again?

And can you try to create a folder "/config/usb_gadget/keyboard" manually (e.g. over a root shell) and check if there is any error (e.g. selinux) in logcat/dmesg due to this?

Thanks a lot for your help to debug this issue!

kstuddard commented 4 years ago

from shell in the phone, running mkdir /config/usb_gadget/keyboard returns mkdir: '/config/usb_gadget/keyboard': Out of memory

I was working on a flowchart/table of sorts to see exactly when the crash occurs. My first set of tests had the Default Gadget (DG) enabled, KB+M not enabled, and the USB cable connected,. From here you can turn off & on DG without issue. Once you run the KB+M script it will enable DG if it's off already. After having ran KB+M, once you disable DG it will freeze (sometimes buzzing) and shut down the phone.

My next set to test was having DG enabled already, having ran KB+M, and then plugging the phone in. After plugging the phone in the phone did not crash, but then I deactivated DG and the phone did crash. At this point it appeared to also fry the USB port on my laptop, so I am not going to continue this line of testing .

I did save logcats from this testing, but some of the earlier ones were done over USB before I realized how much more practical ADB over wifi would be while testing USB stuff. I also don't spend a lot of time in logcat so I am unsure how safe it is to just publish the contents. In the latter files I also tried to run logcat -c before starting the procedure in order to keep the logs smaller & cleaner. Give me a little bit and I'll figure out how to share these logcats and whether it's a safe idea to do so. That said, I grep'd specifically for SELinux and only found entries like this: 

./log3.txt:09-25 22:09:03.990  1241  1444 I SELinux : SELinux: Loaded file_contexts
./log5.txt:09-25 22:18:04.485  1241  1241 D SELinuxMMAC: Using policy file /system/etc/selinux/plat_mac_permissions.xml
./log5.txt:09-25 22:18:04.486  1241  1241 D SELinuxMMAC: Using policy file /vendor/etc/selinux/vendor_mac_permissions.xml

I failed to get any useful dmesg's at all.

SV133U commented 4 years ago

Hi, I am also using the same methods in a rooted Cubot King Kong Mini phone and the mkdir keyboard command fails with Out of Memory and the phone resets! Looking for a solution to this problem I came up with your project (good) and this discussion. Seriously if you want I can give you access to a station with the phone connected and an adb shell for a debug session (but not a pizza ... Sorry!)

yoyo00xx commented 4 years ago

ROOT (stderr) - : <stdin>[53]: can't create strings/0x409/configuration: No such file or directory ln: cannot create symbolic link from '/config/usb_gadget/keyboard/functions/hid.usb0' to '/config/usb_gadget/keyboard/configs/c.1//hid.usb0/hid.usb0': Operation not permitted ln: cannot create symbolic link from '/config/usb_gadget/keyboard/functions/hid.usb1' to '/config/usb_gadget/keyboard/configs/c.1//hid.usb1/hid.usb1': Operation not permitted ROOT - Execute command: for dir in /config/usb_gadget/*/; do echo GADGET_PATH=$dir; cd $dir; if [ "$?" -ne "0" ]; then echo "Error - not able to change dir to $dir... exit"; exit 1; fi; echo UDC=$(cat UDC); find ./configs/ -type l -exec sh -c 'echo FUNCTIONS_ACTIVE=$(basename $(readlink "$@"))' _ {} \;; for f in ./functions/*/; do echo FUNCTIONS=$(basename $f); done; cd ./strings/0x409/; for vars in *; do echo ${vars}=$(cat $vars); done; echo "============="; done;

tejado commented 4 years ago

Currently I see two issues which I need to verify if they are related or not:

  1. Phone freeze when connecting it to a different device. During development, I had sometime the same issue but it was just due to a bad gadget configuration.
  2. "Out Of Memory" error during folder creation in /config/usb_gadget/. I don't have any idea why this happens. Maybe it is a bug in the kernel for specific versions.

@yoyo00xx Can you please provide the complete log? Or can you confirm that you have the same "Out of Memory" error message in your log?

@SV133U Wow, thank you! I really appreciate it. If this will be necessary, I come back to you. But maybe I will just buy the Cubot anyway. Are you using LineageOS or any other custom rom as well? And if yes, what version exactly?

@kstuddard Yes, better to be save and control/check what logs you provide. There could be some sensitive content in it. What happens if you only deactivate DG (Default Gadget) and plug your phone it? Does it freeze?

SV133U commented 4 years ago

Hi! No LineageOS. To root the phone I followed the XDA guide and installed the AOSP 9 SU version already rooted. The kernel is version 4.9.117+ I had the idea of ​​installing Lineage, maybe I'll try ...

baldax95 commented 4 years ago

Hi @tejado, i'm working with @SV133U with the Cubot king kong mini.

Here's a detailed explanation of what i did on the device and also the kernel log attached:

following this guide: https://forum.xda-developers.com/general/rooting-roms/installing-custom-rom-cubot-kingkong-t4050815

-Unlocked oem (in device setting) -Rebooted the device on bootloader mode -flashed:

Everything is fine, device is rooted, recovery is still there and working (twrp) and aosp 9 works fine.

When i try to create a folder inside /config/usb_gadget/ i receive: mkdir: can't create directory 'keyboard': Out of memory

If i disable the g1 gadget (utilising the usb_gadget app) and then plug in the phone nothing happends (no freeze).

Kernel log attached dmesg.log

[UPDATE]

I installed various versions of lineage os (16 and 17), they both work fine but i couln't root them in any way.

I installed AOSP 10 and rooted it, but i have the same "out of memory" problem as for AOSP 9.

freeman1216 commented 4 years ago

Same for me. LineageOS 17.1 Samsung A40. "Out of memory" problem, also tried applying kernel patch, no good, no hdg device created. Also deactivating stock usb gadget bricked my phone. As we can see, all of us running 4.4<=kernel verison <4.14. Watching HID device driver i noticed that even stock version of it is not compiling. So i consider it a kernel problem

Upd: Just do not create another gadget. Add a hid function to an existing one, add some directories, echo some numbers and bam, it works, no need to create another if you can not. Please, add this feature to an app.

tejado commented 4 years ago

@freeman1216 Great, thanks for your update. I will add a feature to do this!

If anyone would like to still debug the "out of memory" issue, maybe it will help to strace the directory creation (strace bins can be found on the internet, e.g. https://github.com/ipduh/strace/tree/master/binaries ) I will need a new device for debugging & testing, this will take a while.

By the way: My kernel is 4.9 and there it is working.

tejado commented 3 years ago

In v0.3 you can add functions to existing gadgets. Please check if this is working for you: https://github.com/tejado/android-usb-gadget/releases/tag/v0.3-beta

tejado commented 3 years ago

Additionally: I had some time to analyze the issue. It seems that on specific kernel versions, the internal device is created by configfs always as "android0". Adding further gadgets is not possible as android0 already exists.

So please try to add Mouse/Keyboard functions to the existing gadget, as @freeman1216 described. This is now possible with android-usb-gadget v0.3. Can you please test this, @Jollastro @freeman1216 @SV133U @kstuddard @yoyo00xx ?

References: https://e2e.ti.com/support/processors/f/791/t/598656?J6EVM5777-Adding-USB-Gadget-on-J6-Android-OS-with-NCM-support https://github.com/corsicanu/android_kernel_samsung_universal8895/blob/9/drivers/usb/gadget/configfs.c#L2041

yoyo00xx commented 3 years ago

it did not crash and it added the functions but i was not able to test it. For example Rucky does not detect USB gadget. If you could provide me with the linux commands I can test in the shell if I can send keystrokes it would be great @tejado

baldax95 commented 3 years ago

Same here, adding the functions is working, no crashes. But once the functions are added i'm unable to identify the devices (/dev/hid0 or /dev/hid1) to utilize the hid-gadget-test.

Another point is: how should the hid-gadget-test be used? Because the "usage print" in the terminal says one way of utilizing it and the README in the github page says another way.

tejado commented 3 years ago

I have the same issue and currently check what options are there. For one of my devices, deactivating all other functions worked. But at a second device, the gadget gets deactivated when ADB function will be deactivated.

The issue is basically inside the kernel... few are working well but a lot of other vendor kernels are not. Depending on the patch level... :/

@Jollastro hid-gadget-test ? This is not part of this project, so I'm not sure what pages you are referring to.

baldax95 commented 3 years ago

The tool i'm talking about is linked in your use-cases (https://github.com/pelya/android-keyboard-gadget).

I'm trying to use it to send keystrokes to the pc with the smartphone but i can't find the device path inside the /dev folder. I've added the keyboard and mouse functions to the default g1 gadget and it doesn't crash but i can't find the devices it creates.

tejado commented 3 years ago

If /dev/hid* devices are not present, the function is not active. See dmesg (e.g. run dmesg -w parallel) during adding the function, activating the gadget and so on for more information. There you see the kernel messages which gives some information why it fails.

baldax95 commented 3 years ago

Hi tejado, /dev/hid1 or /dev/hid2 are not present. Here is the output of dmesg -w parallel while adding the mouse function:

dmesg_out

baldax95 commented 3 years ago

And this is the log of adding the keyboard function: Adding-Keyboard-Function_log

Kosaci commented 3 years ago

I have the same issue. I am running on a Pixel 2; I have experienced this with (rooted) stock 10 and Lineage 17.1 Same steps to reproduce; open app, press the + button and select "keyboard & mouse.sh", plug into PC. Phone then freezes, screen goes black, and it dies. I seem to have to wait a few seconds after unplugging to turn it back on.

I would be very interested in actively helping resolve this issue but I don't really know where to start.

Here is the log; I just open the app, deactivate, and add the kb&m.

`ROOT - Execute command: for dir in /config/usbgadget//; do echo GADGET_PATH=$dir; cd $dir; if [ "$?" -ne "0" ]; then echo "Error - not able to change dir to $dir... exit"; exit 1; fi; echo UDC=$(cat UDC); find ./configs/ -type l -exec sh -c 'echo FUNCTIONSACTIVE=$(basename $(readlink "$@"))' {} ;; for f in ./functions/_/; do echo FUNCTIONS=$(basename $f); done; cd ./strings/0x409/; for vars in *; do echo ${vars}=$(cat $vars); done; echo "============="; done;

ROOT (stdout) - GADGET_PATH=/config/usb_gadget/g1/

UDC=a800000.dwc3 FUNCTIONS_ACTIVE=ffs.adb FUNCTIONS=accessory.gs2 FUNCTIONS=audio_source.gs3 FUNCTIONS=cser.dun.0 FUNCTIONS=cser.nmea.1 FUNCTIONS=diag.diag FUNCTIONS=ffs.adb FUNCTIONS=ffs.mtp FUNCTIONS=ffs.ptp FUNCTIONS=gsi.rmnet FUNCTIONS=gsi.rndis FUNCTIONS=mass_storage.0 FUNCTIONS=midi.gs5 FUNCTIONS=qdss.qdss manufacturer=Google product=Pixel 2 serialnumber=HT7AL1A02668 ROOT (stderr) - ROOT - Execute command: echo "" > /config/usb_gadget/g1//UDC

ROOT (stdout) - ROOT (stderr) - ROOT - Execute command: for dir in /config/usbgadget//; do echo GADGET_PATH=$dir; cd $dir; if [ "$?" -ne "0" ]; then echo "Error - not able to change dir to $dir... exit"; exit 1; fi; echo UDC=$(cat UDC); find ./configs/ -type l -exec sh -c 'echo FUNCTIONSACTIVE=$(basename $(readlink "$@"))' {} ;; for f in ./functions/_/; do echo FUNCTIONS=$(basename $f); done; cd ./strings/0x409/; for vars in *; do echo ${vars}=$(cat $vars); done; echo "============="; done;

ROOT (stdout) - GADGET_PATH=/config/usb_gadget/g1/

UDC= FUNCTIONS_ACTIVE=ffs.adb FUNCTIONS=accessory.gs2 FUNCTIONS=audio_source.gs3 FUNCTIONS=cser.dun.0 FUNCTIONS=cser.nmea.1 FUNCTIONS=diag.diag FUNCTIONS=ffs.adb FUNCTIONS=ffs.mtp FUNCTIONS=ffs.ptp FUNCTIONS=gsi.rmnet FUNCTIONS=gsi.rndis FUNCTIONS=mass_storage.0 FUNCTIONS=midi.gs5 FUNCTIONS=qdss.qdss manufacturer=Google product=Pixel 2 serialnumber=HT7AL1A02668 ROOT (stderr) - ROOT - Execute command: #!/bin/sh

CONFIGFS_DIR="/config" GADGETS_PATH="${CONFIGFS_DIR}/usb_gadget"

GADGET="keyboard" GADGET_PATH=${GADGETS_PATH}/${GADGET}

CONFIG_PATH="$GADGET_PATH/configs/c.1/" STRINGS_PATH="$GADGET_PATH/strings/0x409/"

mkdir -p $CONFIG_PATH mkdir -p $STRINGS_PATH

mkdir -p $GADGET_PATH/functions/hid.usb0 cd $GADGET_PATH/functions/hid.usb0

HID protocol (according to USB spec: 1 for keyboard)

echo 1 > protocol

device subclass

echo 1 > subclass

number of bytes per record

echo 8 > report_length

writing report descriptor

echo -ne \x05\x01\x09\x06\xa1\x01\x05\x07\x19\xe0\x29\xe7\x15\x00\x25\x01\x75\x01\x95\x08\x81\x02\x95\x01\x75\x08\x81\x03\x95\x05\x75\x01\x05\x08\x19\x01\x29\x05\x91\x02\x95\x01\x75\x03\x91\x03\x95\x06\x75\x08\x15\x00\x25\x65\x05\x07\x19\x00\x29\x65\x81\x00\xc0 > report_desc

mkdir -p $GADGET_PATH/functions/hid.usb1 cd $GADGET_PATH/functions/hid.usb1

HID protocol (according to USB spec: 2 for mouse)

echo 2 > protocol

device subclass

echo 1 > subclass

number of bytes per record

echo 4 > report_length

writing report descriptor

echo -ne \x05\x01\x09\x02\xa1\x01\x09\x01\xa1\x00\x05\x09\x19\x01\x29\x05\x15\x00\x25\x01\x95\x05\x75\x01\x81\x02\x95\x01\x75\x03\x81\x01\x05\x01\x09\x30\x09\x31\x09\x38\x15\x81\x25\x7F\x75\x08\x95\x03\x81\x06\xc0\xc0 > report_desc

cd $GADGET_PATH echo 0xa4ac > idVendor echo 0x0525 > idProduct

cd $STRINGS_PATH echo "tejado" > manufacturer echo "HID" > product echo "42" > serialnumber

cd $CONFIG_PATH echo 120 > MaxPower echo "HID Configuration" > strings/0x409/configuration

ln -s ${GADGET_PATH}/functions/hid.usb0 $CONFIG_PATH/hid.usb0 ln -s ${GADGET_PATH}/functions/hid.usb1 $CONFIG_PATH/hid.usb1

ROOT (stdout) - ROOT (stderr) - mkdir: '/config/usb_gadget/keyboard': Out of memory mkdir: '/config/usb_gadget/keyboard': Out of memory mkdir: '/config/usb_gadget/keyboard': Out of memory : [16]: cd: /config/usb_gadget/keyboard/functions/hid.usb0: No such file or directory : [19]: can't create protocol: Read-only file system : [21]: can't create subclass: Read-only file system : [23]: can't create report_length: Read-only file system : [26]: can't create report_desc: Read-only file system mkdir: '/config/usb_gadget/keyboard': Out of memory : [29]: cd: /config/usb_gadget/keyboard/functions/hid.usb1: No such file or directory : [32]: can't create protocol: Read-only file system : [34]: can't create subclass: Read-only file system : [36]: can't create report_length: Read-only file system : [39]: can't create report_desc: Read-only file system : [42]: cd: /config/usb_gadget/keyboard: No such file or directory : [43]: can't create idVendor: Read-only file system : [44]: can't create idProduct: Read-only file system : [46]: cd: /config/usb_gadget/keyboard/strings/0x409: No such file or directory : [47]: can't create manufacturer: Read-only file system : [48]: can't create product: Is a directory : [49]: can't create serialnumber: Read-only file system : [51]: cd: /config/usb_gadget/keyboard/configs/c.1: No such file or directory : [52]: can't create MaxPower: Read-only file system : [53]: can't create strings/0x409/configuration: No such file or directory ln: cannot create symbolic link from '/config/usb_gadget/keyboard/functions/hid.usb0' to '/config/usb_gadget/keyboard/configs/c.1//hid.usb0': No such file or directory ln: cannot create symbolic link from '/config/usb_gadget/keyboard/functions/hid.usb1' to '/config/usb_gadget/keyboard/configs/c.1//hid.usb1': No such file or directory ROOT - Execute command: for dir in /config/usbgadget//; do echo GADGET_PATH=$dir; cd $dir; if [ "$?" -ne "0" ]; then echo "Error - not able to change dir to $dir... exit"; exit 1; fi; echo UDC=$(cat UDC); find ./configs/ -type l -exec sh -c 'echo FUNCTIONSACTIVE=$(basename $(readlink "$@"))' {} ;; for f in ./functions/_/; do echo FUNCTIONS=$(basename $f); done; cd ./strings/0x409/; for vars in *; do echo ${vars}=$(cat $vars); done; echo "============="; done;

ROOT (stdout) - GADGET_PATH=/config/usb_gadget/g1/

UDC=a800000.dwc3 FUNCTIONS_ACTIVE=ffs.adb FUNCTIONS=accessory.gs2 FUNCTIONS=audio_source.gs3 FUNCTIONS=cser.dun.0 FUNCTIONS=cser.nmea.1 FUNCTIONS=diag.diag FUNCTIONS=ffs.adb FUNCTIONS=ffs.mtp FUNCTIONS=ffs.ptp FUNCTIONS=gsi.rmnet FUNCTIONS=gsi.rndis FUNCTIONS=mass_storage.0 FUNCTIONS=midi.gs5 FUNCTIONS=qdss.qdss manufacturer=Google product=Pixel 2 serialnumber=HT7AL1A02668 ROOT (stderr) - `

  1. First try to create directory of keyboard(hid.keyboard) or mouse in /config/usb_gadget/g1/function.
  2. Enter the directory of keyboard(cd hid.keyboard).
  3. Check the output of report_desc(cat report_desc).
  4. If the files gives any output then it is alredy configured for keyboard and make symlink at ../config/b.1/hid.keyboard.
  5. Finally activate at usb_gadget_tool.
  6. It creates hidg* files.
aka56kg commented 2 years ago 
1. First try to create directory of keyboard(hid.keyboard) or mouse  in /config/usb_gadget/g1/function.

2. Enter the directory of keyboard(cd hid.keyboard).

3. Check the output of report_desc(cat report_desc).

4. If the files gives any output then it is alredy configured for keyboard and make symlink at ../config/b.1/hid.keyboard.

5. Finally activate at usb_gadget_tool.

6. It creates hidg* files.

Doesn't work for me, usb keyboard app still doesn't work after this, also, after reboot, these folders are getting deleted

Kosaci commented 2 years ago

What happened after creating directory...